This book introduces a reference architecture that enhances the security of services offered in the information and communication technology (ICT) market. It enables customers to compare offerings and to assess risks when using third-party ICT services including cloud computing and mobile services. Service providers are given a comprehensive blueprint for security implementation and maintenance covering service portfolio management, bid phases and realization projects as well as service delivery management. The architecture is completely modular and hierarchical. It contains a security taxonomy organizing all aspects of modern industrialized ICT production. The book also describes a wealth of security measures derived from real-world challenges in ICT production and service management.

本书介绍了一个参考架构，以加强信息和通信技术（ICT）市场上提供的服务的安全性。它使客户在使用第三方ICT服务（包括云计算和移动服务）时能够比较产品并评估风险。服务供应商得到了一个全面的安全实施和维护蓝图，涵盖了服务组合管理、投标阶段和实现项目以及服务交付管理。该架构是完全模块化和分层的。它包含一个安全分类法，组织了现代工业化ICT生产的所有方面。该书还描述了大量来自ICT生产和服务管理的现实挑战的安全措施。